Product Security Compliance Lead
Employment Information
Report this job
Job expired or something wrong with this job?
Job Description
Product Security Compliance Lead at Second Front Systems ensuring security architecture and compliance programs. Leading a team in security accreditation efforts and driving innovation in compliance processes.
Responsibilities:
- Lead and mentor a team of security engineers and compliance specialists focused on architecture, control implementation, and audit readiness, fostering a culture of ownership, collaboration, and continuous improvement.
- Define and maintain security architecture and control patterns for Game Warden and supporting services, aligned with mission, risk, and accreditation needs.
- Serve as the senior technical lead for the execution of key security accreditations and certifications, including FedRAMP, US agency ATOs, ISO 27001, UK government / NCSC-aligned cloud security expectations, and NATO-related accreditations.
- Lead creation and maintenance of System Security Plans (SSPs), Plans of Action & Milestones (POA&Ms), security policies, standards, and technical control narratives, ensuring documentation accurately reflects our architecture, controls, and operating reality.
- Coordinate continuous monitoring activities, significant change reviews, and evidence collection so our accreditations stay current and our controls get stronger over time.
- Partner closely with Security Operations, Cybersecurity Assessment, Product, Engineering, Legal, and Sales teams to support complex customer requirements and unblock deals in highly regulated environments.
- Lead the technical representation of the company in third-party audits (3PAO) and accreditation sessions, ensuring all security documentation and postures are effectively articulated and defended to maintain authorization.
Requirements:
- 8+ years of experience in information security, with significant time in product / platform security, security architecture, or security engineering.
- Hands-on experience leading technical delivery on one or more security accreditation or certification programs (e.g., FedRAMP, DoD / IC ATOs, ISO 27001, public sector cloud frameworks such as NCSC / UK gov or NATO).
- Demonstrated ability to work with and / or author security documentation such as SSPs, POA&Ms, policies, and technical standards.
- Strong understanding of modern cloud architectures and platforms (e.g., AWS, containers / Kubernetes, SaaS delivery models).
- Comfort partnering with engineering teams on real-world design and implementation, able to propose pragmatic solutions, not just policy language.
- Excellent written and verbal communication skills; able to translate complex security and compliance topics into clear, actionable guidance for both technical and non-technical stakeholders.
- People leadership experience in security or compliance teams.
- Active U.S. Top Secret (TS) security clearance required; eligibility for access to Sensitive Compartmented Information (SCI) required.
Benefits:
- U.S. citizenship is required due to government contract specifications
- Must reside in one of the approved hiring hubs: DC/Maryland/Virginia, Raleigh/Durham/Chapel Hill, NC, Denver/Colorado Springs, CO, Dallas/Fort Worth/Austin, TX
Similar Jobs
Security Authorization Specialist
Security Authorization Specialist managing FedRAMP compliance for the Game Warden platform. Collaborating with cross-functional teams to ensure security and regulatory requirements are met.
Senior Cybersecurity Engineer, Advanced Security
Join Presidio as a Senior Cybersecurity Engineer to architect and optimize cutting-edge security solutions. Mentor talent while collaborating to innovate threat detection and response capabilities.
Security Engineer – AI
Security Engineer AI implementing and operating security controls for cloud platforms and AI tools. Focused on Cloud Applications security and custom AI integrations.
Senior Cybersecurity Engineer, Advanced Security
Senior Cybersecurity Engineer responsible for architecting and deploying innovative cybersecurity solutions at Presidio. Collaborating with enterprise clients and leading security transformation projects.
Security Lead, Vulnerability Management
Security LEAD overseeing vulnerability management, coordinating remediation efforts, and generating status reports in a healthcare-focused team environment.
Senior Sales Executive – Cyber Security
Sales Executive responsible for developing new business and maintaining customer relationships in cybersecurity sales. Joining Integrity360, a leading cyber security provider in Europe.
AI Security & Controls Lead
AI Security & Controls Lead enabling secure AI adoption and evaluating AI-specific security controls. Collaborating with engineering and information security to manage AI risks effectively.
Detection & Response, Security Engineer
Detection & Response Security Engineer at WorkOS building detection logic and improving incident response capabilities. Collaborating with the security team to drive threat detection and operational maturity.
Senior Project Consultant – Security
Senior Project Consultant delivering Microsoft security solutions for mid-market and enterprise clients. Leading technical execution for identity-centric security and compliance projects with a customer-centric approach.
Senior Cyber Security Engineer
Senior Cyber Security Engineer for GE Vernova's Wind portfolio, leading cybersecurity initiatives and vulnerability assessments. Collaborating on designs and audits to enhance product security posture.
Product Security Engineer
Product Security Engineer focusing on secure development and security testing at WorkOS. Collaborating with engineering teams to protect users' data and identities.
Senior Cybersecurity Manager – Offensive Security
Leading offensive security capabilities at Home Depot, driving operational excellence across threat intelligence and investigations. Mentoring teams and establishing strategic roadmaps for cybersecurity objectives.
Security Guard
Unarmed Security Guard conducting patrols and monitoring access at cemetery grounds in Dixon, CA. Ensuring safety and security during funeral services and special events.
Cyber Security Specialist, CMMC Compliance
Cyber Security Specialist focusing on achieving CMMC 2.0 compliance in aerospace & defense. Leading security efforts and managing compliance documentation across IT and OT environments.
Information Security Engineer
Information Security Engineer safeguarding systems in a dynamic financial-services environment. Collaborating with cross-functional teams to improve security and compliance efforts.
Project Manager – Compliance Security Assessments
Project Manager driving compliance and security assessments for technology enterprises. Collaborating with cross-functional teams in managing security compliance and project execution.
Information Security Engineer – Endpoint Security Engineering
Information Security Engineer handling endpoint security within global operations. Leading remediation processes and collaborating with IT security tooling to ensure global endpoint security health.
Cybersecurity Threat and Preparedness Expert
Cybersecurity Threat and Preparedness Expert role at TDI focusing on evaluating cybersecurity preparedness and response strategies through hypothetical incident scenarios.
Senior Product Security Engineer – Automation
Senior Product Security Engineer at Red Hat developing automation tools for security processes. Collaborating with teams to enhance security capabilities across products, addressing new risks and vulnerabilities.
Ingeniero en Ciberseguridad Senior
Senior Cybersecurity Engineer supporting software projects in a challenging environment for financial sector clients. Requires deep knowledge in cybersecurity management and agile methodologies.